Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/503e4ea6-1eb7-413e-af4f-6643fc009258.roa
File: 503e4ea6-1eb7-413e-af4f-6643fc009258.roa (raw, json)
Hash identifier: sibegT26Hc1D3khcFqtT5IeFsUS2hbpeetoDLF0fmII=
Subject key identifier: 09:17:C2:95:9F:C6:95:F6:90:D1:0B:FB:3A:22:F1:B7:71:4C:A4:CE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4EE6B2341DADBBAEF62B4D392714263FCBBC9ACA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/503e4ea6-1eb7-413e-af4f-6643fc009258.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 18.46.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e6:b2:34:1d:ad:bb:ae:f6:2b:4d:39:27:14:26:3f:cb:bc:9a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=3a9f8f05dc6269f4a338a48e1e2de4d1243c0c39eee35a6d7a3fdd75467c5580, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:4b:d3:fe:eb:0b:e0:42:13:a1:70:e9:58:
4d:14:68:0b:d0:29:c0:6e:73:23:ec:ab:00:2e:30:
36:ca:bb:f3:cf:8b:84:34:1b:02:10:d2:94:f6:f9:
c4:75:89:1c:03:8a:0d:fe:71:60:41:07:c0:39:b3:
c7:8d:26:92:c7:94:f3:ef:d3:4f:4f:73:06:d2:c7:
f5:78:c5:9b:46:88:36:2e:8d:81:c1:4c:d9:92:4c:
8d:1f:fb:1f:34:2c:dc:62:e6:a2:11:69:f9:78:24:
a7:51:64:9e:e5:2f:62:78:d4:ad:cc:c0:15:72:48:
07:f0:fb:9c:7d:21:97:bd:9a:04:d4:4c:57:e0:68:
8d:a0:ac:42:4c:59:2f:eb:e0:96:ce:9e:3c:32:77:
f5:31:bb:7a:d2:26:4b:16:22:4d:41:4d:c0:1e:93:
a2:c1:e9:53:70:c6:a3:ca:b3:1e:aa:d1:20:27:8e:
04:16:71:63:78:b5:07:8c:d0:79:10:9f:e1:5d:b2:
67:82:91:30:ed:1a:7b:e1:e2:e5:f1:dd:d8:f4:b5:
e7:66:8c:17:b8:4f:2d:e0:b7:93:1a:06:11:93:64:
ac:4e:2e:5d:40:f8:51:ca:26:35:5f:ba:5a:e4:c6:
6a:85:11:c2:92:6a:48:ab:f8:eb:7c:df:14:97:a1:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:17:C2:95:9F:C6:95:F6:90:D1:0B:FB:3A:22:F1:B7:71:4C:A4:CE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/503e4ea6-1eb7-413e-af4f-6643fc009258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.46.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:5c:b9:e2:51:d7:73:bb:fa:d2:62:1b:8c:04:64:71:e9:b1:
3c:2c:d8:ec:3b:62:ed:88:c5:0c:bd:42:80:aa:85:80:98:c4:
6b:5c:61:30:84:45:39:61:0e:3d:c0:66:c4:7f:32:22:b4:a4:
c3:aa:ef:6a:b8:73:3f:e7:4d:85:bf:9b:97:a3:fc:31:91:c7:
60:2b:9a:16:b0:5e:47:77:b3:e2:83:cd:ab:cd:2c:fd:24:2a:
26:18:22:c5:e8:ea:58:e1:65:28:ce:a9:ee:b2:a6:40:1d:29:
1b:16:ab:22:58:6a:4b:b3:e1:66:25:2d:8e:fd:c3:5c:d2:99:
ca:a1:ee:cc:e4:dd:80:8c:3a:15:d5:ec:20:d2:2d:49:5d:37:
e2:56:04:68:0b:4b:22:3d:1f:cf:6c:46:13:57:63:5c:f0:16:
d8:aa:8c:ff:73:f8:62:90:da:41:8b:5f:15:7d:d7:d3:04:c9:
46:67:6b:d1:7c:a0:6e:4f:d9:70:11:af:92:26:e7:8b:74:80:
bf:79:bd:fe:d9:20:4b:e0:1f:71:14:c8:07:80:48:45:82:02:
61:94:f2:99:e0:8a:63:6e:c0:c8:f5:c5:3e:c6:33:87:13:ce:
64:08:6d:a0:54:d9:88:30:85:b9:8b:8e:05:10:30:e4:4c:73:
30:57:cf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:51 2025 by rpki-client